$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e203538343835.roa File: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (raw, json) Hash identifier: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk= Subject key identifier: E1:C6:4E:36:1E:91:5B:4A:B3:CB:DA:19:B1:E2:8A:33:75:62:5C:A2 Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04 Certificate serial: 532D6E30669B3577878B38E06D8380BDB6705E42 Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e203538343835.roa Signing time: Sun 03 May 2026 02:23:18 +0000 ROA not before: Sun 03 May 2026 02:18:18 +0000 ROA not after: Sun 02 May 2027 02:23:18 +0000 asID: 58485 IP address blocks: 103.247.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2d:6e:30:66:9b:35:77:87:8b:38:e0:6d:83:80:bd:b6:70:5e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04 Validity Not Before: May 3 02:18:18 2026 GMT Not After : May 2 02:23:18 2027 GMT Subject: CN=E1C64E361E915B4AB3CBDA19B1E28A3375625CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:08:5e:2f:86:8d:c4:69:d0:98:2e:e1:ef: b1:b1:2f:c6:7d:3c:10:8a:18:db:ee:0c:88:48:ae: 52:13:e1:95:c3:42:a3:02:60:ad:56:30:19:06:6d: f2:af:5c:b0:69:89:c4:db:ed:3f:39:3d:c3:11:98: b7:7d:e3:50:28:0f:50:55:9f:99:14:c1:fa:b8:85: 2c:18:26:d0:57:05:1d:64:ad:5a:ce:a4:0f:02:1f: ec:f1:5b:de:5d:27:78:45:9c:17:48:3e:4c:03:b9: bd:8a:07:5a:cf:a3:5b:20:f0:d9:c3:0f:6a:ef:d7: c7:52:f1:a6:85:4f:1d:9e:67:a9:8e:3b:e1:3c:23: 27:77:3f:28:e1:0f:6b:69:43:e0:64:03:b8:2e:06: d6:49:47:81:fb:36:54:2f:b6:28:3e:99:fc:56:c3: e7:0a:88:3c:6e:47:da:96:11:85:c7:51:3b:a6:cd: 80:54:8a:4c:77:7e:ec:35:05:e0:35:5e:58:f9:57: be:31:91:58:bf:02:26:ea:e4:8c:ba:55:f0:4f:7c: d7:cc:cf:47:9d:7c:9f:45:fb:71:c2:15:f2:18:f7: 6d:57:6b:06:19:a2:a1:3d:f0:53:6a:c6:6e:de:52: 0b:9a:b5:26:98:50:43:2f:ba:3d:07:18:b7:08:ca: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:4E:36:1E:91:5B:4A:B3:CB:DA:19:B1:E2:8A:33:75:62:5C:A2 X509v3 Authority Key Identifier: keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e203538343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.20.0/24 Signature Algorithm: sha256WithRSAEncryption de:8f:31:65:ce:c5:2d:4d:9c:43:68:2f:2c:c6:33:f9:18:9a: 88:96:34:f2:d2:04:f6:ba:86:9a:02:3b:17:99:76:54:e0:90: 55:e6:67:d5:21:b4:68:cc:47:f1:58:f4:9a:09:71:a7:e9:96: 15:a1:f4:97:bb:c5:2c:f9:88:0f:f7:4e:bf:da:5f:c2:1a:cf: bb:c7:14:93:53:fe:96:5f:9c:29:3d:80:d2:0b:07:50:db:4b: 43:08:e1:f9:ca:a0:8d:f8:97:c6:e0:ca:ee:b8:3e:00:18:a1: 27:3b:06:d7:40:fd:19:7e:b8:4a:71:6d:91:95:47:75:9b:d2: 17:32:d7:91:5c:ba:46:54:16:6a:68:e9:6d:23:4c:61:10:aa: 01:20:e2:ae:db:58:57:7f:dc:4b:48:fe:1e:ff:97:77:b0:97: 40:7d:b7:39:5c:79:e4:78:5a:82:fc:be:7a:7d:2b:ad:5f:7e: a4:a4:98:77:d2:7c:55:66:64:c2:f8:05:33:dd:91:7d:e2:9c: 95:b9:e4:1f:5f:7b:5f:8f:f2:c4:3b:b2:f4:68:85:b2:f4:73: c1:c2:05:22:a2:28:25:c3:4f:3e:43:5b:b7:77:a5:84:c1:0c: 5f:dd:8c:ba:a9:5b:38:47:1b:04:e5:10:e7:9c:0f:c3:0c:8a: 20:df:e4:14 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUy1uMGabNXeHizjgbYOAvbZwXkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMx MkZGOUEwNDAeFw0yNjA1MDMwMjE4MThaFw0yNzA1MDIwMjIzMThaMDMxMTAvBgNV BAMTKEUxQzY0RTM2MUU5MTVCNEFCM0NCREExOUIxRTI4QTMzNzU2MjVDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rgheL4aNxGnQmC7h77GxL8Z9 PBCKGNvuDIhIrlIT4ZXDQqMCYK1WMBkGbfKvXLBpicTb7T85PcMRmLd941AoD1BV n5kUwfq4hSwYJtBXBR1krVrOpA8CH+zxW95dJ3hFnBdIPkwDub2KB1rPo1sg8NnD D2rv18dS8aaFTx2eZ6mOO+E8Iyd3PyjhD2tpQ+BkA7guBtZJR4H7NlQvtig+mfxW w+cKiDxuR9qWEYXHUTumzYBUikx3fuw1BeA1Xlj5V74xkVi/Aibq5Iy6VfBPfNfM z0edfJ9F+3HCFfIY921XawYZoqE98FNqxm7eUguatSaYUEMvuj0HGLcIyvNJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4cZONh6RW0qzy9oZseKKM3ViXKIwHwYDVR0j BBgwFoAUZvlq6/nIohM3y0p4FTab7BL/mgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVlNDdiYmYtYmE4NC00NDhmLTk2MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJG OUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMxMkZGOUEwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkY5NkFFQkY5QzhBMjEzMzdDQjRBNzgxNTM2OUJFQzEyRkY5 QTA0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJmLWJhODQtNDQ4Zi05 NjJiLTJhYWY1YzdkZDY4ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3FDANBgkqhkiG 9w0BAQsFAAOCAQEA3o8xZc7FLU2cQ2gvLMYz+RiaiJY08tIE9rqGmgI7F5l2VOCQ VeZn1SG0aMxH8Vj0mglxp+mWFaH0l7vFLPmID/dOv9pfwhrPu8cUk1P+ll+cKT2A 0gsHUNtLQwjh+cqgjfiXxuDK7rg+ABihJzsG10D9GX64SnFtkZVHdZvSFzLXkVy6 RlQWamjpbSNMYRCqASDirttYV3/cS0j+Hv+Xd7CXQH23OVx55Hhagvy+en0rrV9+ pKSYd9J8VWZkwvgFM92RfeKclbnkH197X4/yxDuy9GiFsvRzwcIFIqIoJcNPPkNb t3elhMEMX92MuqlbOEcbBOUQ55wPwwyKIN/kFA== -----END CERTIFICATE-----Generated at Wed May 13 00:43:39 2026 by rpki-client